Talks DEFCON 28 BlockChain Village: Exploit Insecure Crypto Wallet https://www.youtube.com/watch?v=oJaNiXVvE88 ================================================================ Security workshop with Binance Smart Chain: Understanding Security Risks in DeFi https://www.youtube.com/watch?v=ErvOqJZB5lU&t=172s ================================================================ Security risks in DeFi(Guest speaker for the Blockchain Cyberdefense Design Challenge at the Columbia university) https://docs.google.com/presentation/d/1x8iAy-Hind7wAiUkTWSe_FG9VpWPFOXAbiR2hIwNqzc/edit?usp=sharing ================================================================ DEFCON 29 BlockChain Village: Evils in the DeFi world https://docs.google.com/presentation/d/1jg_OyIiqinmD1Sdd7Mja5RHtdKn_i1dGfSuv9uik2S4/edit#slide=id.ge53a73c461_0_1094 ================================================================ Articles After I […]

Note:  This write up doesn’t explain all steps, for free to email me at: peipei123gt@gmail.com if you not sure how I get X. ‌‌ ‌‌ ‌‌ ‌‌ ‌‌ ‌‌ ‌‌ ‌‌ ‌‌ ‌‌ ‌‌ ‌‌ #BabyCSP: 1. Bad CSP rule: ‌‌ ‌‌ ‌‌ ‌‌ ‌‌ ‌‌ 2. Submit a post with the payload and report […]

The detail about Apache Struts S2-057 Vulnerability: https://nvd.nist.gov/vuln/detail/CVE-2018-11776 ‌‌ ‌‌ ‌‌ ‌‌ ‌‌ Ubuntu: 1. Setup the environment 1.1 System version: ubuntu 14.04. 1.2 Install apache tomcat: sudo apt-get install tomcat7 sudo apt-get install tomcat7-docs tomcat7-admin tomcat7-examples sudo apt-get install default-jdk 1.3 Download the vulnerable Apache struts from: https://archive.apache.org/dist/struts/2.3.34/ 1.4 Extra files from the Zip […]

I went to Tampa, Florida last weekend to participate Raymond James CTF. My team got 3rd place with $2500 award. The weather in Florida is so0O gO0od: 24 degrees C, meanwhile it’s like 3 degrees C in Baltimore. The team photo: My eyes were closed lol. The trophy: The coin from gam3z: The onsite-CTF was 70% […]

picoCTF is a CTF hosted by CMU targeted at high school students, which is a great opportunity for beginner to improve their skill. I enjoy this CTF a lot.Not really a Team, just me.  This is the Writeup for Flaskcards serial: “Flaskcards”, “Flaskcards Skeleton Key” and “Flaskcards and Freedom”. All three problems have the same interface: first […]